CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- mudler localai, mudler/localai +1 moreCommand Injection in mudler/localai9.8 Critical
- lunary, lunary-ai lunary-ai/lunary +1 moreSession Reuse Vulnerability in lunary-ai/lunary7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Authorization in lunary-ai/lunary9.1 Critical
- lunary, lunary-ai lunary-ai/lunary +1 moreIncorrect Authorization in lunary-ai/lunary9.1 Critical
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreImproper Access Control in gaizhenbiao/chuanhuchatgpt7.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreStored XSS leading to RCE in parisneo/lollms-webui8.8 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreOS Command Injection in parisneo/lollms-webui9.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal Vulnerability in parisneo/lollms-webui9.8 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrivilege Escalation via Mass Assignment in mintplex-labs/anything-llm7.2 High
- qdrant, qdrant qdrant/qdrant +1 morePath Traversal and Arbitrary File Upload Vulnerability in qdrant/qdrant9.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreLocal File Inclusion in parisneo/lollms-webui9.3 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreDenial of Service (DoS) Vulnerability in mintplex-labs/anything-llm7.5 High
- lunary-ai lunary-ai/lunary, lunary-ai\/lunary +1 moreUnauthorized Organization Access in lunary-ai/lunary9.1 Critical
- run-llama llama index, run-llama/llama index +1 morePrompt Injection leading to Arbitrary Code Execution in run-llama/llama_index9.8 Critical
- gradio-app gradio-app/gradio, gradio project gradio +1 moreLocal File Inclusion in gradio-app/gradio7.5 High
- huggingface huggingface/transformers, transformers +1 moreArbitrary Code Execution via Deserialization in huggingface/transformers3.4 Low
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in lunary-ai/lunary7.5 High
- mintplex-labs mintplex-labs/anything-llm, mintplex-labs\/anything-llm, mintplexlabs anythingllm +2 morePath Traversal in mintplex-labs/anything-llm9.9 Critical
- berriai berriai/litellm, litellm +1 moreServer-Side Template Injection in BerriAI/litellm9.8 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform: Password hash might be leaked by diff once the xobject holding them is deleted6.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: User Impersonation in GlobalProtect SSL VPN4.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure5.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Predefined Decryption Exclusions Does Not Work as Intended5.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled7.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets7.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)7.4 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets7.5 High
- catkin redi restaurant reservationWordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) to XSS vulnerability7.1 High
- tribulant slideshow galleryWordPress Slideshow Gallery LITE plugin <= 1.7.8 - Auth. SQL Injection vulnerability8.5 High
- solwin infotech user activity logWordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerability7.6 High
- wpcloudgallery wordpress gallery exporterWordPress Gallery Exporter plugin <= 1.3 - Arbitrary File Download vulnerability6.5 Medium
- sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 moreWordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability7.5 High
- max foundry media library foldersWordPress Media Library Folders plugin <= 8.1.8 - Directory Traversal vulnerability6.5 Medium
- infotheme wp poll makerWordPress WP Poll Maker plugin <= 3.1 - Auth. Arbitrary File Deletion vulnerability7.7 High
- ibm security verify access appliance, security verify access +1 moreIBM Security Verify Access Appliance denial of service6.2 Medium
- wpexperts wholesale for woocommerceWordPress Wholesale For WooCommerce plugin <= 2.3.1 - Unauthenticated Arbitrary Post/Page vulnerability7.5 High
- ibm security verify access appliance, security verify access +1 moreIBM Security Verify Access Appliance information disclosure7.5 High
- saleswonder team: tobias 5 stars rating funnel, saleswonder.biz 5 star rating funnel +1 moreWordPress 5 Stars Rating Funnel plugin <= 1.2.67 - Arbitrary Content Deletion vulnerability7.5 High
- hashgraph guardianDoS on IDS parsing of malformed Radius packets in Guardian before 23.4.18.2 High
- ibm security verify access appliance, security verify access +1 moreIBM Security Verify Access Appliance improper certificate validation7.5 High
- convertkit, convertkit - email marketing\, email newsletter and landing pages +1 moreWordPress ConvertKit plugin <= 2.4.5 - Email Disclosure in Log File vulnerability5.3 Medium
- ibm security verify access appliance, security verify access +1 moreIBM Security Verify Access Appliance missing certificate validation7.5 High
- frederic gilles fg drupal to wordpress, fredericgilles fg drupal +1 moreWordPress FG Drupal to WordPress plugin <= 3.70.3 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- hashgraph guardian, nozomi networks cmc, nozominetworks central management control +2 moreInformation disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.17.5 High
- wpkube subscribe to comments reloadedWordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability5.3 Medium
- webtoffee wordpress backup & migration, backup and migration +1 moreWordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability3.7 Low
- searchiqWordPress SearchIQ plugin <= 4.5 - Sensitive Data Exposure via Log File vulnerability7.5 High
- leap13 premium addons for elementorWordPress Premium Addons for Elementor plugin <= 4.10.22 - Sensitive Data Exposure vulnerability4.3 Medium
- joel user spam removerWordPress User Spam Remover plugin <= 1.0 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- codepeople contact form emailWordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability5.3 Medium
- Show moreLoading…